Security Expert
This one covers the full security stack with concrete examples for each OWASP Top 10 vulnerability. You get parameterized queries for SQL injection, proper escaping for XSS, CSRF token implementation, and authorization middleware patterns. It includes real code showing both the vulnerable version and the fix, which is honestly more useful than most security guides that just tell you what not to do. The password hashing is bcrypt with sensible defaults, rate limiting is included, and there's a solid section on security headers with helmet. If you're doing security reviews or hardening an application, the side-by-side comparisons make it easy to spot problems in your own code.
- skills.sh installs
- 228
- GitHub stars
- 44
- last updated
- Aug 21, 2026
Install
$ npx -y skills add personamanagmentlayer/pcl --skill security-expert --agent claude-codeInstalls into .claude/skills of the current project.
Files
Security Expert
Expert guidance for application security, vulnerability assessment, penetration testing, OWASP Top 10, secure coding practices, and security architecture.
Core Concepts
Security Principles
- Defense in depth
- Least privilege
- Secure by default
- Fail securely
- Complete mediation
- Separation of duties
- Zero trust architecture
OWASP Top 10 (2021)
- Broken Access Control
- Cryptographic Failures
- Injection
- Insecure Design
- Security Misconfiguration
- Vulnerable and Outdated Components
- Identification and Authentication Failures
- Software and Data Integrity Failures
- Security Logging and Monitoring Failures
- Server-Side Request Forgery (SSRF)
Security Domains
- Authentication & Authorization
- Cryptography
- Input validation
- Session management
- Error handling
- Secure communications
- Data protection
Cryptography
Encryption at Rest
const crypto = require('crypto');
const ALGORITHM = 'aes-256-gcm';
const KEY = Buffer.from(process.env.ENCRYPTION_KEY, 'hex'); // 32 bytes
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/personamanagmentlayer/pcl
- Categories
- Testing & QA, Security
- First seen
- Jun 3, 2026
More from personamanagmentlayer/pcl
All 99- Aws Expert226
- Aerospace Expert225
- Scala Expert224
- Standards Expert224
- Flask Expert223
- Csharp Expert219
- Maritime Expert219
- Kafka Expert218
- Fastapi Expert216
- Nodejs Expert214
- Databricks Expert212
- Kubernetes Expert212
- Spring Boot Expert209
- Devops Expert207
- Elasticsearch Expert203
- Testing Expert203
- Kotlin Expert201
- Sre Expert201
- React Expert197
- Performance Expert196
- Javascript Expert195
- Elixir Expert192
- Looker Expert192
- Mongodb Expert192
Recommended
More Testing & QA
web-research-workflowyonatangross/orchestkitUnified decision tree for web research and competitive monitoring. Auto-selects WebFetch, Tavily, or agent-browser based on target site characteristics and avai227skills.sh installs
pr-specialistmanojbajaj95/claude-gtm-pluginExpert PR and media relations guidance for earned media, press coverage, and reputation building. Use when writing press releases, crafting media pitches, devel225skills.sh installs
terrasharklukasniessen/terrasharkPrevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and complian223skills.sh installs
slack-messagingobra/superpowers-labUse when asked to send or read Slack messages, check Slack channels, test Slack integrations, or interact with a Slack workspace from the command line.223skills.sh installs
composable-architecturejohnrogers/claude-swift-engineeringUse when building features with TCA (The Composable Architecture), structuring reducers, managing state, handling effects, navigation, or testing TCA features. 222skills.sh installs
ln-831-oss-replacerlevnikolaevich/claude-code-skillsReplaces custom modules with OSS packages using atomic keep/discard testing. Use when migrating custom code to established libraries.220skills.sh installs